Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
File: 6ee98048-5141-4b16-8b8c-269a397f53ce.roa (raw, json)
Hash identifier: MARFL6xiCo3IoLDeiP8WDeUfkryH8kDp9mAofA7f/bI=
Subject key identifier: 87:BA:00:78:34:43:A7:53:82:8B:FC:B0:BD:2F:6C:0D:0B:25:8E:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 046BCBFF7322745F98145B978911B6E07375AC05
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6b:cb:ff:73:22:74:5f:98:14:5b:97:89:11:b6:e0:73:75:ac:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=dabe78a58064b0fe471d143a6efe3672fb3e528f2fa2d065dd2605c4904fc9c1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:28:63:04:30:46:2e:aa:8f:65:22:f3:12:
46:42:b3:0f:45:16:f7:81:35:f7:d6:05:d8:94:e5:
85:c4:85:49:a7:6b:da:0a:d3:40:5c:dc:9e:a6:44:
4f:0f:70:85:6f:d3:3a:be:7d:ed:99:18:26:a7:89:
c5:d2:02:27:1e:49:85:e9:f1:b4:de:19:83:a1:22:
55:94:ab:46:f2:52:0d:08:bc:47:af:b8:fe:06:d1:
d2:85:0f:c4:41:77:63:40:71:f8:2d:76:4f:81:e7:
9a:1d:49:b7:89:47:97:77:79:04:81:87:51:a4:ab:
ae:8c:80:4e:6c:51:58:ef:81:99:45:02:ba:f7:26:
95:8a:bb:c9:ab:85:81:85:2e:ec:0a:72:b4:18:87:
59:36:4c:a3:f2:3e:48:42:9b:e7:36:24:82:92:af:
17:1c:90:4f:e3:8d:67:f6:c7:fb:36:ee:1b:f6:86:
44:98:e2:ef:68:c3:fd:95:f7:0f:46:7f:90:9f:ce:
81:91:01:c5:bf:c0:41:d3:10:25:f3:33:51:f5:1c:
33:f1:11:6b:06:27:82:ca:8e:28:55:95:e1:b5:1c:
3d:60:2f:f6:4b:b2:06:a5:5c:4b:67:7d:8b:ff:37:
29:87:15:70:1e:25:2b:bd:14:97:6f:0c:c5:5d:b7:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BA:00:78:34:43:A7:53:82:8B:FC:B0:BD:2F:6C:0D:0B:25:8E:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4080::/48
Signature Algorithm: sha256WithRSAEncryption
5c:d6:e8:69:b3:42:db:f3:f8:79:31:cb:80:97:99:e5:d8:4d:
23:9c:56:d7:dd:80:f1:ae:a9:2c:4e:11:81:4c:43:a8:8e:22:
d0:61:ca:8d:95:df:e8:2c:17:f8:6d:58:77:34:ef:ed:70:09:
61:ed:d7:ea:c9:5a:51:35:d9:fb:97:2b:8a:11:d3:86:11:26:
5c:b9:23:9f:e6:57:68:53:79:70:90:0a:d5:28:76:24:7a:c9:
16:e1:5b:36:8a:02:48:c0:0f:8c:95:9d:6a:47:6c:cf:da:33:
59:06:da:4f:f0:6d:b2:48:1a:e1:21:49:f6:e3:c0:09:48:8e:
c5:64:26:75:8e:72:a7:f6:df:c1:b8:04:ce:8a:94:3e:e7:61:
a0:d2:99:af:e8:fc:ae:0e:21:de:0a:3b:c1:68:e8:b6:e1:b9:
4f:09:b0:bc:7c:fa:0c:44:71:34:39:81:8b:c2:57:33:09:43:
49:1a:df:01:ed:17:60:97:84:aa:c3:8c:24:d1:72:77:06:eb:
e6:7f:99:01:2c:26:2a:f5:d2:b8:cb:e6:23:42:ed:d0:0c:0d:
4e:f1:8b:92:ad:dc:0d:3f:29:a8:b9:e7:1a:f5:b5:6d:76:07:
15:92:03:68:56:d4:60:c8:c7:ef:b0:58:2c:2e:c5:5e:26:9d:
b2:44:9d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:18 2025 by rpki-client